Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
File: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer (raw, json)
Hash identifier: oNPBmTcEdBytfdUaFgNI4KaylIKWWUXFVRc2pLWFS20=
Subject key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE2008B8928EF97EBEDF1A7F07F468
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41924
IP: 193.36.176.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:20:08:b8:92:8e:f9:7e:be:df:1a:7f:07:f4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5682c32795f04a43209c68cd70ead248945992f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:14:87:78:ce:64:d6:27:02:8f:f9:b8:05:
ef:b3:39:82:0e:de:5d:b5:1e:87:ca:fd:a1:2a:d7:
b7:6e:3d:f5:ee:93:98:6e:4b:36:97:72:a7:10:f7:
a1:af:0a:80:a7:78:f9:eb:44:5b:dd:50:2f:6b:e9:
7e:6b:a0:24:96:c8:37:7b:5c:e4:de:9a:8d:3d:1f:
53:20:bb:6a:23:23:28:03:75:8c:04:f1:a6:7b:0e:
f9:48:55:2c:f1:03:52:d8:37:35:5f:05:1c:ee:66:
9d:6f:7a:e7:8e:b9:9d:34:31:0e:69:49:22:26:13:
4f:34:1a:62:a5:e6:d5:fb:32:11:85:1e:87:a7:75:
15:ae:84:0a:d2:69:e1:43:56:53:d4:10:6a:6d:c5:
73:f5:92:cc:58:02:7e:82:bb:e0:d9:62:88:52:49:
ea:f9:3c:0e:11:9c:e8:ce:0e:cf:17:bb:5e:cf:61:
0a:f0:eb:bd:e5:7d:71:3f:35:9f:e2:b8:5d:bc:50:
e0:22:61:96:1f:62:04:e0:92:d1:73:c7:8f:ac:22:
7a:c3:bc:fc:bc:c3:3a:4e:45:ff:ba:45:18:5f:37:
97:3c:ee:6f:2c:d4:a1:93:b7:94:96:c8:c8:1a:28:
4b:48:cf:25:74:dd:7f:aa:a3:c8:53:5c:87:16:d0:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.176.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41924
Signature Algorithm: sha256WithRSAEncryption
65:cc:0d:5d:ea:c4:07:00:b9:5f:16:91:22:a9:70:e2:3a:cb:
ec:7f:99:ef:e6:d6:7d:97:7f:3b:d5:5b:93:01:88:a2:f8:b9:
b8:b4:48:f5:73:d4:d5:8e:4e:21:1c:48:7b:9b:e5:7a:9f:db:
31:e6:4c:7a:09:1e:33:7b:da:61:d1:24:b2:22:e1:bb:f0:7a:
d2:3c:e7:64:b0:94:97:94:fb:98:2b:2c:90:20:e4:3b:8c:2d:
50:12:88:45:82:8b:07:d0:4f:8e:25:a7:3d:31:2f:a9:0d:f8:
73:b1:ee:e0:cf:58:66:dc:71:4a:bc:0a:89:22:ff:68:7c:32:
ba:a3:92:1b:5d:fd:1a:31:42:be:20:04:54:6f:03:56:7b:74:
09:e1:fd:dd:66:f2:38:f5:27:36:61:5a:2f:97:11:41:05:2a:
a4:1c:44:87:7c:63:5d:f8:c1:cf:0d:29:e9:90:8c:6e:cc:4c:
ef:cc:8b:21:f5:07:f9:98:ce:17:e6:46:e1:f5:94:73:cf:46:
4a:82:66:cb:d9:cf:6d:65:7a:29:45:2f:b6:bb:2e:93:8a:c9:
0e:10:96:11:58:0d:bb:d8:17:eb:4e:98:f9:d8:30:d5:c9:fd:
33:a2:72:88:49:ae:54:26:42:fe:72:98:f0:57:49:f4:42:66:
17:34:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:35:06 2024 by rpki-client on console-ams.rpki-client.org